A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials.
A developer needs to implement encrypted username and password credentials.
Which solution will meet these requirements?
Suggested Answer: B
Get Premium DVA-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
25 comments · newest first
TH
Thomas Laurent
2 hours ago
Going with A since the tricky part is removing credentials from the Lambda environment, but IAM database authentication doesn't apply to an SFTP transfer.
ED
Edgar
33 minutes ago
A is not ideal. IAM database authentication is complex.
TE
Tess
5 days ago
D is risky. Storing in S3 could expose the file.
LE
Leontine
10 days ago
I agree, but C sounds good too. KMS is strong for encryption.
JA
Jamal
16 days ago
I think option B is the best. Parameter Store is secure.
EM
Emogene
21 days ago
B just makes sense. Easy to retrieve and encrypt.
DA
Dahlia
26 days ago
A seems unnecessary. IAM database auth adds complexity.
GL
Gladys
1 month ago
I feel D is risky. Storing in S3 could expose the file.
IV
Ivette
1 month ago
Option C could work too, but KMS is more complex.
SA
Sabra
1 month ago
I agree, B is straightforward and manageable.
AL
Allene
2 months ago
I think option B is the best. Parameter Store is secure.
OM
Omer
2 months ago
IAM database authentication isn't really applicable here, right?
HE
Herman
2 months ago
Wait, can you really store sensitive info in a .txt file in S3? Sounds risky!
HO
Honey
2 months ago
KMS is great too, but it might be overkill for just credentials.
GL
Glenn
2 months ago
I agree, Parameter Store is a solid solution.
KA
Kaitlyn
2 months ago
Option B is the best choice for secure storage!
SA
Samira
3 months ago
Definitely don't want to store credentials in plain text.
DE
Devon
3 months ago
Surprised they even considered a .txt file in S3!
EZ
Ezekiel
3 months ago
But isn't KMS more secure than Parameter Store?
AU
Audra
3 months ago
I agree, Parameter Store is a solid solution!
SH
Shawn
3 months ago
Option B is the best choice for secure storage.
IS
Isabelle
3 months ago
I vaguely recall that IAM database authentication is more for database connections, so option A doesn't seem relevant for SFTP credentials.
OL
Olene
4 months ago
I practiced a similar question about securing credentials, and I think moving them to an encrypted file in S3 is not ideal because it still exposes them. So, option D feels risky.
AR
Arthur
4 months ago
I'm not entirely sure, but I think AWS KMS is more about encryption rather than storing credentials directly. So, option C might not be the best fit.
TW
Twila
5 months ago
I remember we discussed using AWS Systems Manager Parameter Store for securely storing sensitive information like credentials. It seems like option B could be the right choice.